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Amendments to the Claims 

Please amend Claims 1, 6, 13, 26-27 and 29-31. Please cancel claim 32 without 
prejudice. The Claim Listing below will replace all prior versions of the claims in the 
application: 

Claim Listing 

1 . (Currently amended) A method of protecting a mobile wireless user via a firewall 
application in a wireless transceive r comprising : 

defining a mobile user profile indicative of a desired firewall configuration 
corresponding to the mobile user; 

establishing the firewall configuration at a firewall application in the a wireless 
transceiver corresponding to the current location of the mobile user, the wireless 
transceiver operable for wireless communication with the mobile user via a wireless 
access unit; and 

establishing the same firewall configuration at a firewall application in another a 
second wireless transceiver when the user is located in the area corresponding to the 
anothe r second wireless transceiver. 

2. (Original) The method of claim 1 wherein the firewall configuration is indicative of a set 
of firewall characteristics corresponding to a particular mobile user. 

3. (Original) The method of claim 1 wherein the firewall is operable to selectively provide 
authorized access via the wireless transceiver. 

4. (Original) The method of claim 1 wherein the wireless transceiver is a Base Station 
Processor (BSP). 

5. (Original) The method of claim 1 wherein the wireless transceiver is an internetworking 
gateway in communication with a Base Station Processor (BSP). 
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6. (Currently amended) The method of claim 2 wherein the firewall configuration 
corresponding to each of a plurality of mobile users is stored in a central repository. 

7. (Original) The method of claim 6 wherein the central repository is a Wireless Internet 
Facility (WIF). 

8. (Original) The method of claim 2 wherein establishing further comprises an indexed 
lookup according to a unique identifier indicative of the particular mobile user. 

9. (Original) The method of claim 8 wherein the unique identifier is an index selected from 
the group consisting of a subscriber ID and an electronic serial number (ESN). 

10. (Original) The method of claim 1 wherein the firewall is located on a wired network side 
of wireless link. 

1 1 . (Original) The method of claim 10 wherein the wired side corresponds to an ISP side of 
the wireless link, the ISP side connected to a public access network. 

12. (Original) The method of claim 3 further comprising selectively allowing message packet 
transmissions by determining if a message packet corresponds to the firewall 
characteristics of a particular mobile user profile. 

13. (Currently amended) The method of claim 12 wherein the firewall characteristics are ^ 
selected from the group consisting of port numbers, application IDs, source, destination, 
content filters, IP address, machine names, virus detection, password scanning cracking, 
denial of service detection, and TCP/IP flags. 

14. (Original) A system for protecting a mobile wireless user via a firewall comprising: 

a subscriber access unit in communication with the mobile wireless user, the 
access unit operable to transmit and receive wireless transmissions; 
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a wireless transceiver in wireless communication with the access unit, the wireless 
transceiver operable for communication via a public access network; 

a firewall application in the wireless transceiver, the firewall application operable 
to establish a firewall configuration to selectively forward wireless transmissions 
according to a mobile user profile corresponding to the mobile wireless user; and 

a handoff manager operable to establish communications with a second wireless 
transceiver when the mobile wireless user is in an area corresponding to the second 
wireless transceiver, wherein the communications with the second wireless transceiver 
corresponds to the mobile user profile. 

15. (Original) The system of claim 14 wherein the firewall is operable to selectively provide 
authorized access via the wireless transceiver. 

16. (Original) The system of claim 14 wherein the wireless transceiver is a Base Station 
Processor (BSP). 

17. (Original) The system of claim 14 wherein the wireless transceiver is an internetworking 
gateway in communication with a Base Station Processor (BSP). 

18. (Original) The system of claim 14 further comprising a unique identifier indicative of the 
particular mobile user, the unique identifier adapted for an indexed lookup of the mobile 
user profile. 

19. (Original) The system of claim 18 wherein the unique identifier is an index selected from 
the group consisting of a subscriber ID and an electronic serial number (ESN). 

20. (Original) The system of claim 14 wherein the firewall configuration is indicative of a set 
of firewall characteristics corresponding to a particular mobile user. 
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21. (Original) The system of claim 14 further comprising a central repository, wherein the 
firewall configuration corresponding to each of a plurality of mobile users is stored in the 
central repository. 

22. (Original) The system of claim 21 wherein the central repository is a Wireless Internet 
Facility (WIF). 

23. (Original) The system of claim 14 wherein the firewall is located on wired network side 
of wireless link. 



24. (Original) The system of claim 14 wherein the wired side corresponds to an ISP side of 
the wireless link. 



25. (Original) The system of claim 14 wherein the firewall is operative to selectively allow 
message packet transmissions by determining if a message packet corresponds to the 
firewall characteristics of a particular mobile user profile. 

26. (Currently amended) The system of claim 25 wherein the firewall characteristics are 
selected from the group consisting of port numbers, application IDs, source, destination, 
content filters, IP address, machine names, virus detection, password scanning cracking, 
denial of service detection, and TCP/IP flags. 

27. (Currently amended) A method of protecting mobile wireless users via a firewall 
application in a base station comprising: 

defining a first mobile user profile indicative of a desi r ed first firewall 
configuration corresponding to the first mobile user; 

establishing the firewall configuration at a firewall application in the a base 

station; 

defining a second mobile user profile indicative of a desi r ed second firewall 
configuration corresponding to a second mobile user; 
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establishing the second firewall configuration at [[a]] the firewall application in 
the base station; 

receiving message packets at the base station; 

when the message packets are directed to the first mobile user, determining, 
according to the first mobile user profile, whether to forward the message packets to the 
first mobile user; and 

when the message packets are directed to the second mobile user, determining, 
according to the second mobile user profile, whether to forward message packets directed 
to the second mobile user. 

28. (Original) The method of claim 27 wherein the first mobile user profile and the second 
mobile user profile are different. 

29. (Currently amended) A computer program product having computer program code for 
protecting a mobile wireless user via a firewall application in a wireless transceive r 
comprising: 

computer program code for defining a mobile user profile indicative of a desired 
firewall configuration corresponding to the mobile user; 

computer program code for establishing the firewall configuration at a firewall 
application in the a wireless transceiver corresponding to the current location of the 
mobile user, the wireless transceiver operable for wireless communication with the 
mobile user via a wireless access unit; and 

computer program code for establishing the same firewall configuration at a 
firewall application in anothe r a second wireless transceiver when the user is located in 
the area corresponding to the an o the r second wireless transceiver. 

30. (Currently amended) A computer data signal for protecting a mobile wireless user via a 
firewall application in a wirel e ss transceiver comprising: 

program code for defining a mobile user profile indicative of a desired firewall 
configuration corresponding to the mobile user; 
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program code for establishing the firewall configuration at a firewall application 
in the a wireless transceiver corresponding to the current location of the mobile user, the 
wireless transceiver operable for wireless communication with the mobile user via a 
wireless access unit; and 

program code for establishing the same firewall configuration at a firewall in 
another a second wireless transceiver when the user is located in the area corresponding 
to the another second wireless transceiver. 

3 1 . (Currently amended) A system for protecting a mobile wireless user via a firewall 
comprising: 

means for defining a mobile user profile indicative of a desired firewall 
configuration corresponding to the mobile user; 

means for establishing the firewall configuration at a firewall application in the 
wireless transceiver corresponding to the current location of the mobile user, the wireless 
transceiver operable for wireless communication with the mobile user via a wireless 
access unit; and 

means for establishing the same firewall configuration at a firewall in anothe r a 
second wireless transceiver when the user is located in the area corresponding to the 
anothe r second wireless transceiver. 



32. (Canceled). 



